KB5022297 cumulative update for Windows 10

KB5022297 is the cumulative update for Windows 10 version 1507 for x64 and x86 system architecture. The update was released on 10th January under the ‘Patch Tuesday’ initiative of Microsoft.

Salient points about KB5022297 for Windows 10

• KB5022297 is the cumulative security update for Windows 10 initial version unveiled in 2015. It corresponds to Windows 10 version 1507.

• KB5022297 supersedes KB5021243 cumulative update that was released in December 2022.

• KB5022297 corresponds to Windows 10 build 10240.19685. KB5021243 matches Windows 10 build 10240.19624. So, when you upgrade from KB5021243 to KB5022297, you are moving from system build 10240.19624 to 10240.19685.

• Servicing Stack Update KB5014024 must be deployed before installing KB5022297 on Windows 10 version 1507. SSU was released in May 2022.

The direct download links for KB5022297 are shared below for ready reference.

Download KB5022297 for Windows 10

KB5022297 can be deployed automatically through one of the following preferred methods:

• Windows Update
• Windows Update for Business
• WSUS or Windows Server Update Service

You can install KB5022297 manually. You will need to download the KB5022297 update from the Microsoft Catalog page for KB5022297. The direct download links of the offline installer files for KB5022297 are shared hereunder.

Since you want to install the Servicing Stack Update prior to installing KB5022297, the download links also contain the links for the Servicing Stack Update KB5014024.

Cumulative update/SSU	Download link for the update	Size of the update
KB5014024 for Windows 10 x64	Download KB5014024 x64	11.7 MB
KB5014024 for Windows 10 x86	Download KB5014024 x86	5.3 MB
KB5022297 for Windows 10 x64	Download KB5022297 x64	1206.8 MB
KB5022297 for Windows 10 x86	Download KB5022297 x86	734.3 MB

KB5022297 – Changelog for Windows 10 version 1507

KB5022297 includes a fix for the database connectivity issues that were caused post-deployment of KB5021243 cumulative update in December 2022.

This update addresses a known issue that affects apps that use Microsoft Open Database Connectivity (ODBC) SQL Server Driver (sqlsrv32.dll) to connect to databases. The connection might fail. You might also receive an error in the app, or you might receive an error from the SQL Server.

Microsoft release notes

Zero-day vulnerabilities on Windows 10

As per January month’s security bulletin released by Microsoft, Windows 10 version 1507 x64 and x86 editions are affected by the zero-day threats CVE-2022-21549 and CVE-2022-21674.

• CVE-2022-21674 affects Windows Advanced Local Procedure Call (ALPC) and is an ‘Elevation of Privilege’. It carries a CVSS score of 8.8.
• CVE-2022-21549 affects Windows SMB Witness Service and is another ‘Elevation of Privilege’ vulnerability with a CVSS score of 8.8.

Both vulnerabilities are patched in KB5022297 for Windows 10.